Privacy Policy

Super Maps is operated by 200 Studio LLC, at 4851 W Hillsboro Blvd, Ste A3, Coconut Creek, FL 33073, US. We are responsible for the personal information we process to operate the service. You can contact us about privacy at hello@supermaps.ai.

Account information includes your identity-provider identifier, email address, and profile information such as your name. Authentication is handled through WorkOS and the sign-in providers available on the service, such as Google.

Map content can include titles, descriptions, locations, coordinates, notes, custom fields, narratives, tags, media, and visibility settings. We also process the tool requests that your connected AI assistant sends to create, read, or change that content.

We process technical information needed to deliver and protect the service, such as request and error information. When analytics is enabled, PostHog collects usage events and can associate signed-in activity with your account identifier, email address, and name. If you contact support, we receive the information you send us.

We use account and map information to provide the service you request: authenticate you, host and display maps, apply access settings, and carry out authorized tool requests. We use technical information to maintain security, investigate errors and abuse, and improve the service. We use support messages to respond to your request.

Where applicable data-protection law requires a legal basis, providing the requested service relies on performance of our agreement with you; security and service reliability rely on our legitimate interests, balanced against your rights; and compliance with legal obligations relies on those obligations. Where consent is required for optional processing, that processing requires your consent, which you can withdraw.

Connecting an assistant authorizes it to use the Super Maps tools available to that connection on your behalf. These tools can read your maps and create or modify map content, including places, fields, media, narratives, and visibility settings. Some tools can delete content. This is meaningful access to your account, not just permission to view a single map.

We receive the content and arguments the assistant sends in its tool requests, rather than automatically receiving your entire conversation. Map data returned by a tool is shared with the connected client. The assistant provider processes your conversation and returned data under its own terms and privacy policy.

Review the permissions and requests in your client before connecting. Confirmation behavior depends on the client; do not assume every change will require a separate confirmation. You can disconnect through the client’s connector settings. Disconnecting does not delete existing maps or information already sent to the client.

New maps are public by default. Anyone with a public map link can view its content. Search indexing is disabled by default, but a no-index setting is not access control and does not make a public map private.

Use the available private or password-protected access settings before adding sensitive content. A password-protected link can be used by anyone who has the password. Information that others have copied, downloaded, or independently retained may remain outside our control after you change access or delete the original.

Only add personal information that you have a lawful basis to share. Avoid publishing confidential information or precise locations that could put someone at risk.

The service uses authentication cookies and browser storage for functions such as sign-in, appearance preferences, and interface state. Browser controls can restrict storage, although some functionality may be affected.

Analytics and error reporting can process browsing events and device information when configured. These are separate from the map content you deliberately publish. Contact us if you want to exercise your rights over analytics data associated with your account.

We use service providers to operate the product: WorkOS and sign-in providers for authentication; Convex for backend functions, data, and file storage; Vercel for hosting; PostHog for analytics and error reporting; Cloudflare for image processing; Geoapify for geocoding; and OpenFreeMap for map tiles. What a provider receives depends on the feature you use. For example, geocoding requires location queries and map tiles require network requests.

Your chosen AI provider receives information through the connection you authorize. Public map content is available to its viewers. We may also disclose information when legally required, to address fraud or security incidents, or as part of a business transfer subject to applicable privacy requirements. We do not sell your personal information.

We retain account and map information while needed to provide the service and for the purposes described here. Retention depends on the type of information, your requests, security needs, and applicable legal obligations. We do not retain information indefinitely simply because it may be useful later.

Deleting a map makes it unavailable through the service and starts background cleanup of its associated records and hosted media. Cleanup is not instantaneous across every system. Logs, backups, support records, and information held by third-party providers have separate retention processes.

To request account deletion or ask about information we retain, email hello@supermaps.ai. We may need to verify your identity. Some information may be retained when required by law or necessary to establish, exercise, or defend legal claims. Copies already held by map viewers or your AI provider are not removed by deleting a map here.

Depending on your location, you may have rights to access, correct, delete, receive a portable copy of, or restrict processing of your personal information, and to object to certain processing. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

Send requests to hello@supermaps.ai. We will assess and respond within the period required by applicable law and explain any applicable exceptions. You may also complain to your local data-protection authority. Your rights are not limited by this policy.

200 Studio LLC is based in the United States. Our providers may process information in other countries. Applicable protections and transfer requirements depend on your location and the providers involved. Contact us for information about the arrangements relevant to your data.

We use authentication and access checks to control account operations and protected maps. No system can guarantee absolute security. Keep your sign-in credentials and map passwords safe, review the AI clients you authorize, and contact us if you suspect unauthorized access.

The service is intended for a general audience and is not directed at children. If you believe a child has supplied personal information without appropriate authorization, contact us so we can investigate and take appropriate action under applicable law.

We may update this policy as the service changes. The date above identifies the latest revision. We will provide additional notice where required by law. For questions, contact hello@supermaps.ai or write to 200 Studio LLC at 4851 W Hillsboro Blvd, Ste A3, Coconut Creek, FL 33073, US.